1. Introduction & Scope
This Privacy Policy ("Policy") describes how CodeWithBuntu ("we", "us", "our"), a software development studio operated by Arun Singh and based in Jammu & Kashmir, India, collects, uses, stores, and protects personal information obtained through our website at codewithbuntu.com and any associated services, including our client intake process, newsletter, blog, and the Leadzy product showcase.
This Policy applies to all visitors, prospective clients, newsletter subscribers, and anyone who interacts with our website or submits a project enquiry. It does not apply to third-party websites we may link to.
2. Data Controller
For the purposes of applicable data protection legislation (including the GDPR and India's Digital Personal Data Protection Act 2023), the data controller is:
CodeWithBuntu
Nowshera, Rajouri, Jammu & Kashmir, India – 185151
If you are located in the European Economic Area (EEA) and have concerns about our data processing, you also have the right to lodge a complaint with your local supervisory authority.
3. Information We Collect
We only collect information that is reasonably necessary to provide our services and improve your experience. Below is a precise breakdown of what we collect and where.
3.1 Project Enquiry / Contact Form
When you submit a project brief through the Project Planner on our Contact page, we collect:
We also auto-generate a Client ID (format: CWB-C-{timestamp}) and a Project ID (format: CWB-P-{timestamp}-{random}) for internal tracking. The source is recorded as "Website".
3.2 Newsletter Subscription
When you subscribe via the footer newsletter form, we collect your email addressand record the subscription timestamp. This data is stored in our Firestoresubscribers collection. You may unsubscribe at any time via the link in any email we send.
3.3 Feedback & Testimonials
If you submit a testimonial through our Feedback page, the content you provide (including your name and review text) is stored in our feedbacks collection and may be displayed publicly on our website as part of our "Wall of Love." Submission is voluntary.
3.4 Automatic Visitor Data
When you browse our website, our server automatically receives and logs:
- IP address (used to derive approximate geographic location)
- Browser type and version (e.g., Chrome 124 on macOS)
- Operating system and device type
- Referring URL (the page you came from)
- Pages visited and time spent on each page
- Date and time of visit
- Screen resolution and language preference
We use session-based deduplication via sessionStorage to avoid logging the same visit multiple times. Admin routes, API routes, and static assets are excluded from visit tracking.
4. How We Use Your Data
We use personal data only for the purposes for which it was collected or for compatible purposes. Specifically:
Project Delivery
To scope, quote, and deliver the software project you enquired about, including correspondence, proposals, SOW preparation, and milestone updates.
Client Communication
To send project status updates, invoices, and responses to your enquiries via email. We do not cold-call or spam.
Service Improvement
Aggregated, anonymised visitor analytics help us understand which pages are most useful and improve site performance.
Security & Fraud Prevention
IP logging and session tracking help us detect abuse, block bot submissions, and protect the integrity of our forms and admin panel.
Newsletter & Tutorials
Subscribed email addresses are used to notify you of new tutorials, YouTube uploads, and service updates. Each email includes an unsubscribe link.
Legal Compliance
We may process data to comply with applicable Indian law, respond to court orders, or enforce our Terms of Service.
5. Legal Basis for Processing (GDPR)
If you are in the EEA or UK, we rely on the following legal bases under the GDPR:
7. Third-Party Services
We integrate the following third-party services, each governed by their own privacy policies. We encourage you to review these policies where relevant to you.
Database, authentication, file storage, and serverless functions.
Embedded tutorial videos and channel content on our Blogs page via the YouTube Data API.
Displays our office location on the Contact page.
Routes transactional emails (project enquiry confirmations, admin notifications) via Gmail SMTP.
Client-side notification library for success and error modals. No data is transmitted externally.
Renders the phone country-code selector in our contact form. Runs entirely client-side; no data is shared.
We are not responsible for the privacy practices of any third-party service. We select partners who meet high data protection standards and have Data Processing Agreements where required.
8. YouTube & Embedded Media
Our Blogs page fetches and displays content from our YouTube channel (@codewithbuntu) using the YouTube Data API v3. When you:
- Browse the Blogs pageOur server calls the YouTube API to fetch video metadata (title, thumbnail, view count, duration). No personal data about you is sent to YouTube at this stage.
- Play a videoAn embedded YouTube player loads, which may set YouTube/Google cookies and collect data according to Google's Privacy Policy — including your IP address, device info, and watch behaviour.
- Subscribe or like via YouTubeAny interaction with YouTube's embedded player or links is governed solely by YouTube/Google's terms.
9. Data Retention
We retain personal data only as long as necessary for the purpose it was collected, or as required by law. Our default retention periods are:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Project enquiry (non-client) | 12 months | After which we consider the lead inactive |
| Active client records | 5 years post-project | For warranty, legal, and tax compliance |
| Newsletter subscribers | Until unsubscribe | Removed promptly on request |
| Feedback/testimonials | Until deletion requested | May be displayed publicly while active |
| Visitor analytics logs | 90 days | Sufficient for traffic pattern analysis |
| Admin authentication logs | 30 days | Security audit trail |
| Financial records (invoices) | 7 years | Indian Income Tax Act requirements |
11. Your Privacy Rights
Depending on your location, you may have the following rights. We honour all valid requests within 30 days at no charge.
12. Children's Privacy
Our website and services are intended for adults and businesses. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately at codewithbuntu@gmail.com and we will delete it promptly upon verification.
13. International Data Transfers
CodeWithBuntu is based in India. If you are accessing our website from the EEA, UK, USA, or another jurisdiction with data protection laws, please be aware that your data may be transferred to and processed in India, and in the USA (via Google Firebase servers).
Google Firebase's cross-border transfers are covered by the EU Standard Contractual Clauses (SCCs) and Google's Cloud Data Processing Addendum. For transfers from India, we comply with the Digital Personal Data Protection Act 2023 (DPDPA). We take appropriate safeguards to ensure your data is protected to a standard at least equivalent to that required under your local law.
14. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to active clients and newsletter subscribers at least 14 days before changes take effect
- Display a prominent notice on our website homepage for 14 days following the update
Your continued use of our website after the effective date of the revised Policy constitutes your acceptance. If you do not agree with the changes, you should discontinue use and may request deletion of your data.
15. Contact Us
For privacy enquiries, data access/deletion requests, or concerns about how we handle your data, please reach out. We aim to respond within 2 business days and resolve all requests within 30 days.
Address
Nowshera, Rajouri, Jammu & Kashmir, India – 185151
Response Time
Mon–Fri, 9 AM – 6 PM IST
Requests fulfilled within 30 days
Last updated: March 29, 2026
© 2026 CodeWithBuntu. All rights reserved.